Supply Chain Attack Exploits Hugging Face for Malware Distribution and Data Exfiltration

MicrosoftSystem64 is a cross-platform malware built as a Node.js Single Executable Application. It steals credentials, crypto wallets, SSH keys and Telegram sessions, exfiltrating data to attacker-controlled HuggingFace datasets. Originating from a malicious npm package in April 2026, it utilizes embedded runtimes to evade detection.

Pulse ID: 6a1c2fc0a63cda655beac722
Pulse Link: https://otx.alienvault.com/pulse/6a1c2fc0a63cda655beac722
Pulse Author: cryptocti
Created: 2026-05-31 12:55:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HuggingFace #InfoSec #Malware #Microsoft #NPM #Nodejs #OTX #OpenThreatExchange #RAT #SSH #SupplyChain #Telegram #Troll #bot #cryptocti

A single 30-second video ad served to roughly 2.4 million viewers can generate around 12 tonnes of CO₂ - and it does not appear in campaign reports.

Every ad served generates a carbon cost most measurement tools misses: bid requests, redirects and verification calls triggered by programmatic ads even before the ad is loaded, as well as to serve and display these.

Read the article: https://lumotraq.com/frameworks-and-standards

#carbonemissions #supplychain
#adtech

https://www.youtube.com/watch?v=KRnno9VIZx0

> Microsoft revokes Office 2019 perpetual licenses, then edits their website to gaslight customers.

Even for #microslop , thats a low move. "We" really need to get the heck out of post-factual software american #softwarevendors and #supplyChain 😊

#microsoft #consumer #corporateGreed #corporatePower

📰 AI Amplifies Supply Chain Threats, Creating New and Complex Cyber Risks

🤖 AI is a double-edged sword for supply chains. While boosting efficiency, it's also creating new attack vectors like model poisoning and prompt injection. Third-party AI tools are a growing risk. #AI #CyberSecurity #SupplyChain #RiskManagement

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/ai-exacerbates-cybersecurity-risks-in-global-supply-chains/?utm_source=mastodon&utm_med…

📰 Massive 'Megalodon' Supply Chain Attack Compromises 5,500+ GitHub Repos to Steal Cloud Credentials

🚨 SUPPLY CHAIN ATTACK: 'Megalodon' hits 5,500+ GitHub repos, injecting malicious Actions to steal AWS, GCP, Azure credentials. CISA has issued a warning. #SupplyChain #GitHub #Infosec

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/megalodon-supply-chain-attack-compromises-over-5500-github-repositories/?utm_source=mastodon&utm_medium=social&utm_campaign=daily